Heya chaps and chappesses,

Was wondering what everyone else does for their anti-spam for their servers?

currently running an exchange 2000 machine that gets its mail fed to it via a pop3 downloader from some mailboxes on the net.

at present we pay a small charge ontop of the mailbox rental for anti spam and antivirus in one, but its increasingly bouncing legitimate messages or not responding to hosts on the net from what i hear back from the users.
also the web interface for trying to track down messages frankly sucks (no search options, 10 messages a page and only forward n back arrows to traverse the thousands it blocks a day...) so im looking at options on how i could bring it in house.


At the minute im looking into using SpamAssassin for the donkey work inhouse, with subject re-writing.
Not too sure on how to fully set it up as yet as im still looking at options.

other options considered at the minute are (expensive!) a barracuda spam / anti virus appliance or GFI mail essentials installed to the exchange server.

if i can get SpamAssassin  to do what we need for free thatd be ideal.

any other ideas appreciated, im most comfortable on windows but im fully prepared to dabble on the penguin side to get it working.

Change your mailbox provider for providing a sh*te antispam soloution and charging you for it.

http://www.barracudanetworks.com/ns/products/spam_overview.php

Our pproviders use Baracuda Anti Spam filters and do the job and paid a one of cost to be switched over to them.

Exchange it self has its own fitering capablities, if you were using an SMTP  for incoming I would have said increase the intellegant message filtering and set logging up.

My address rob@, recieved roughly 200-300 spams a day.  I dont see any here in outloook.

I personally try to avoid adding any unessecary software for a server.

which provider do you use?

and exchange ive got is exchange 2000, IMF came into being with exchange 2003  :cry:

Cant upgrade to 2003 or 2007 then?

Also I thought IMF was for SMTP feeds only?

YGPM

Trend IMSS, ironport or clearswift mimesweeper. Best of breed.

And you dont add any of these products to mail servers (Except maybe DR boxes that are virtualised), they go on your DMZ and become the MX record and the exchange box sits where it should, on the LAN and firewalled off. I wouldnt even consider putting exchange of any kind on the internet - with the exception of a 2007 edge server, but only then behind at least one firewall

If mimesweeper or IMSS is too dear (Although they are economical), emailsystems is a hosted online solution that seems to work well for smaller orgs, while maintaining a degree of the manageability that the two above provide.

Get an edge box like Trend IMSS on your DMZ, make that your MX record and put exchange back on the LAN.

PS - you could also Junk your exchange and implement Scalix. Its excellent.

Cisco use it in their corporate environment.

You can even do away with all need for an installed email client.

 
No spam - 100% guaranteed... http://www.clearmymail.com

 :-)

how come i always get pulled off a project and told to do something else that seems insignificant *sigh*

keep the links coming in though, at some point itll come to a head and then itll drop hard on my shoulders as ever.


today got a non delivery report off a customer, it got bounced back due to "address may be forged" error.

had a chat to them, dont know the co-incidence plans, they altered their setup in December and reports where coming in end of November about missing mail.

the ip theyre sending from didt resolve back to their domain name, so told them to look into SPF, hopefully that should sort it...

most orgs will bounce messages that fail an RDNS check - its a fairly standard procedure.